v 4.9 — Hybrid Split Deprecation · abyss CLI separation

Give your AI agent
a personality.

Composable identity, style, and 30 engineering skills
— including 4 native security domains and a self-evolution forge.

$ npx code-abyss -t claude -y

Browse Personas Submit Yours npm

Runs on Claude Code Codex CLI Gemini CLI OpenClaw

Architecture

Voice, judgment, style

Mix any persona with any style. Judgment is a separate, lazily-invoked layer neither one can override.

01 · Voice

Who it sounds like

Self/user address, language style, register, emoji policy — a closed vocabulary with no field shaped like a decision table.

config/personas/*.json

02 · Judgment

How it decides

9 discipline-kernel bundles, invoked lazily by a thin router — never baked into every prompt, never overridden by voice or style.

skills/_kernel/*

03 · Style

How it sounds

Tone, report skeletons, formatting. Template vars make cross-combo safe.

output-styles/*.md

6personas × 6styles = 36validated combos

Security Spine

Four native security domains

v4 ships 4073 lines of original defense engineering, replacing the Apache-2.0 coff0xc upstream. Builders, blue/purple teams, and architects each get their own dedicated skill.

defending-applications

Web/API/GraphQL hardening, OAuth/OIDC/JWT/Session, LLM AppSec (prompt injection, RAG poisoning, agent authz). 785 lines.

785 lines

securing-cloud-and-supply-chain

Container escape defense, K8s RBAC/PSS/NetworkPolicy, SLSA/Sigstore/SBOM, cloud IAM, IaC security. 1246 lines.

1246 lines

detecting-and-responding

Sigma/YARA rule writing, EDR primitives, NIST 800-61 IR, forensics (Win/Linux/Mac/Cloud), threat hunting. 942 lines.

942 lines

architecting-security

STRIDE/PASTA/LINDDUN threat modeling, zero-trust identity (WebAuthn, Kerberos, PAM JIT), SOC2/PCI/HIPAA/GDPR. 1100 lines.

1100 lines

Browse on GitHub

Code Intelligence

Your agent sees code relationships

The abyss CLI — a Rust-powered code relationship graph that builds in seconds. Call graph, impact analysis, hotspot detection, change coupling. Zero cloud dependencies.

Impact Analysis

See blast radius before you edit. Direct/transitive callers, affected tests, uncovered paths, risk score.

abyss impact

File Context

One command returns all callers, dependencies, hotspot score, and coupled files for any file. No function name needed.

abyss context

Hotspot Map

Churn × complexity = risk. Find the most dangerous files instantly. Git-powered change coupling detects hidden dependencies.

abyss map

Evolution Trace

Why does this code look the way it does? Commit history, coupled files, churn rate — per function, not just per file.

abyss history

Resolution vs SCIP ground truth: Go99.3% TypeScript98.8% Python98.7% Rust98.5%

abyss CLI on GitHub

Self-Evolution

The forge that grows itself

v4.1 adds two meta-skills. The agent watches for repeated workflows and stable voice patterns, then proposes distillation — never silent. Every output passes a default-deny safety scan before landing.

cultivating-skills

Distill repeated workflows into reusable skills. Scaffold, lint, scan, improve, promote across L0/L1/L2 tiers. Default-deny on dangerous tools, prompt injection, hardcoded secrets.

skill_forge.js

cultivating-personas

Distill a stable self/user address and speech pattern into a Persona Voice Card v1.0. Reuses the existing submit portal — three legal/platform/content red lines enforced.

persona_forge.js

L0 · Local ~/.claude/skills/local/ — explicit invocation only

L1 · Project repo .claude/skills/ — team-shared, warn-blocking

L2 · Community upstream PR — full block + warn enforced

Gallery

Persona presets

Six built-in personas. Community submissions open.

Open Standard

Persona Voice Card v1.0

A closed-vocabulary voice format — not a document.
No field shaped like a decision table anywhere in the type.

Structured Voice self / user / language / register / emoji_policy

ii.

Non-invasive by construction additionalProperties:false — no authorization tiers, no priority orderings, nowhere for judgment to hide

iii.

Flourish Up to 2 short signature phrases — catchphrases, not instructions

iv.

Portable Convert to/from CharaCard V2 and GPT Instructions

Read the Spec JSON Schema

{ "spec": "persona-voice-card", "slug": "my-persona", "self": "I", "user": "you", "register": "casual", "emoji_policy": "minimal", "flourish": [ "..." ] }

Get Started

One command away

Pick your platform. Code Abyss handles auth detection, config merge, and skill installation.

Claude Code

npx code-abyss -t claude -y

or claude plugin install code-abyss

Codex CLI

npx code-abyss -t codex -y

Gemini CLI

npx code-abyss -t gemini -y

OpenClaw

npx code-abyss -t openclaw -y

Mix freely: --persona elder-sister --style abyss-cultivator

Enable the code-graph engine: --with-abyss or --with-mcp